Stored Cross-Site Scripting Vulnerability in Beaver Builder Addons by WPZOOM

CVE-2024-2181

What is CVE-2024-2181?

The Beaver Builder Addons for WordPress developed by WPZOOM contains a Stored Cross-Site Scripting vulnerability that allows authenticated attackers with contributor-level access or higher to exploit the Button widget. This flaw is due to inadequate input sanitization and output escaping, enabling malicious scripts to be injected into pages. When a user visits an affected page, these malicious scripts will execute, potentially compromising user data and site integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References